Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

e43af739d8...18.dll

windows7-x64

10

e43af739d8...18.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e43af739d8c6b0284f961a6ac3b055a0_JaffaCakes118

  • Size

    804KB

  • Sample

    241212-clzqeswrav

  • MD5

    e43af739d8c6b0284f961a6ac3b055a0

  • SHA1

    8ffcaa3a43460132898f5662f18d870b1b262b0e

  • SHA256

    340c9cca533d419fd91da066cd89a0000c1aa96700ced431701f9950403e81c9

  • SHA512

    c976598ee93ad6728b24d865d706781707bee3c6f02ae57190e048bc67d4636a5d90f89607e4d523350ae8864c34c9faa58faa5f6a3128bbb9a7dd2bacb3f0db

  • SSDEEP

    12288:t6wseXyl8eHx0Tos+QY+TviT1Lj6V99mqDuWCSsmj7:t6wseXyl8eHx0Tos+p+6+DuWCSN

Score
10/10
ramnitbankerdiscoveryspywarestealertrojanupxworm

Malware Config

Targets

    • Target

      e43af739d8c6b0284f961a6ac3b055a0_JaffaCakes118

    • Size

      804KB

    • MD5

      e43af739d8c6b0284f961a6ac3b055a0

    • SHA1

      8ffcaa3a43460132898f5662f18d870b1b262b0e

    • SHA256

      340c9cca533d419fd91da066cd89a0000c1aa96700ced431701f9950403e81c9

    • SHA512

      c976598ee93ad6728b24d865d706781707bee3c6f02ae57190e048bc67d4636a5d90f89607e4d523350ae8864c34c9faa58faa5f6a3128bbb9a7dd2bacb3f0db

    • SSDEEP

      12288:t6wseXyl8eHx0Tos+QY+TviT1Lj6V99mqDuWCSsmj7:t6wseXyl8eHx0Tos+p+6+DuWCSN

    Score
    10/10
    ramnitbankerdiscoveryspywarestealertrojanupxworm

    • Ramnit

      Ramnit is a versatile family that holds viruses, worms, and Trojans.

      trojanspywarestealerwormbankerramnit

    • Ramnit family

      ramnit

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks